For the last decade, there has been an extensive and organized effort by organizations to assess their risks, especially in financial services. Non Financial firms are now increasing their risk management especially in the light of such complex, global, and out sourced supply chains. The new ISO 31000 and ISO 31010 frameworks provide guidelines in this process that make good sense and build on years of work by risk professionals.